fix: bump the version-updates group across 1 directory with 8 updates #238

dependabot · 2025-10-20T03:30:37Z

Bumps the version-updates group with 8 updates in the / directory:

Package	From	To
@reduxjs/toolkit	`2.9.0`	`2.9.1`
dompurify	`3.2.7`	`3.3.0`
@testing-library/jest-dom	`6.8.0`	`6.9.1`
esbuild	`0.25.10`	`0.25.11`
eslint-plugin-react-refresh	`0.4.22`	`0.4.24`
rollup	`4.52.3`	`4.52.5`
typescript	`5.9.2`	`5.9.3`
typescript-eslint	`8.45.0`	`8.46.1`

Updates @reduxjs/toolkit from 2.9.0 to 2.9.1

Release notes

Sourced from @reduxjs/toolkit's releases.

v2.9.1

This bugfix release fixes how sorted entity adapters handle duplicate IDs, tweaks the TS types for RTKQ query state cache entries to improve how the data field is handled, and adds better cleanup for long-running listener middleware effects.

What's Changed

fix(entityAdapter): ensure sorted addMany keeps first occurrence of duplicate ids by @demyanm in reduxjs/redux-toolkit#5097

fix(entityAdapter): ensure sorted setMany keeps just unique IDs in state.ids by @demyanm in reduxjs/redux-toolkit#5107

fix(types): ensure non-undefined data on isSuccess with exactOptionalPropertyTypes by @CO0Ki3 in reduxjs/redux-toolkit#5088

Allow executing effects that have become unsubscribed to be canceled by listenerMiddleware.clearListeners by @chris-chambers in reduxjs/redux-toolkit#5102

Full Changelog: reduxjs/redux-toolkit@v2.9.0...v2.9.1

Commits

fde0be7 Release 2.9.1
47e7d81 Release @rtk-query/codegen-openapi 2.1.0
b4b7d17 Allow executing effects that have become unsubscribed to be canceled by `list...
95eda57 Added a config property to toggle extensions on generated files based on expe...
ff23771 fix(types): ensure non-undefined data on isSuccess with `exactOptionalPrope...
eeaa35b fix: Generated hooks also includes operationNameSuffix when provided (#5089)
15b379f fix(entityAdapter): ensure sorted setMany keeps just one ID in state.ids afte...
fd39b8e Merge pull request #5097 from demyanm/bugfix/5096-process-multiple-add-for-th...
2d8031f fix(entityAdapter): fixes after CR
e3ca55f fix(entityAdapter): ensure sorted addMany keeps first occurrence of duplicate...
Additional commits viewable in compare view

Updates dompurify from 3.2.7 to 3.3.0

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.0

Added the SVG mask-type attribute to default allow-list, thanks @prasadrajandran

Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks @nelstrom

Fixed an issue with the slot element being in both SVG and HTML allow-list, thanks @Wim-Valgaeren

Commits

36d1fbc Getting 3.x branch ready for 3.3.0 release (#1157)
See full diff in compare view

Updates @testing-library/jest-dom from 6.8.0 to 6.9.1

Release notes

Sourced from @testing-library/jest-dom's releases.

v6.9.1

6.9.1 (2025-10-01)

Bug Fixes

Fix undefined Node error (nodejs) (#707) (0ff8904)

v6.9.0

6.9.0 (2025-09-30)

Features

Add .toAppearBefore/.toAppearAfter matcher (#702) (95f870a)

Commits

0ff8904 fix: Fix undefined Node error (nodejs) (#707)
95f870a feat: Add .toAppearBefore/.toAppearAfter matcher (#702)
d6663f5 docs: add nossbigg as a contributor for code, and test (#703)
See full diff in compare view

Updates esbuild from 0.25.10 to 0.25.11

Release notes

Sourced from esbuild's releases.

v0.25.11
Add support for with { type: 'bytes' } imports (#4292)

The import bytes proposal has reached stage 2.7 in the TC39 process, which means that although it isn't quite recommended for implementation, it's generally approved and ready for validation. Furthermore it has already been implemented by Deno and Webpack. So with this release, esbuild will also add support for this. It behaves exactly the same as esbuild's existing binary loader. Here's an example:
import data from './image.png' with { type: 'bytes' }
const view = new DataView(data.buffer, 0, 24)
const width = view.getInt32(16)
const height = view.getInt32(20)
console.log('size:', width + '\xD7' + height)
Lower CSS media query range syntax (#3748, #4293)

With this release, esbuild will now transform CSS media query range syntax into equivalent syntax using min-/max- prefixes for older browsers. For example, the following CSS:
@media (640px <= width <= 960px) {
  main {
    display: flex;
  }
}
will be transformed like this with a target such as --target=chrome100 (or more specifically with --supported:media-range=false if desired):
@media (min-width: 640px) and (max-width: 960px) {
  main {
    display: flex;
  }
}

Changelog

Sourced from esbuild's changelog.

0.25.11
Add support for with { type: 'bytes' } imports (#4292)

The import bytes proposal has reached stage 2.7 in the TC39 process, which means that although it isn't quite recommended for implementation, it's generally approved and ready for validation. Furthermore it has already been implemented by Deno and Webpack. So with this release, esbuild will also add support for this. It behaves exactly the same as esbuild's existing binary loader. Here's an example:
import data from './image.png' with { type: 'bytes' }
const view = new DataView(data.buffer, 0, 24)
const width = view.getInt32(16)
const height = view.getInt32(20)
console.log('size:', width + '\xD7' + height)
Lower CSS media query range syntax (#3748, #4293)

With this release, esbuild will now transform CSS media query range syntax into equivalent syntax using min-/max- prefixes for older browsers. For example, the following CSS:
@media (640px <= width <= 960px) {
  main {
    display: flex;
  }
}
will be transformed like this with a target such as --target=chrome100 (or more specifically with --supported:media-range=false if desired):
@media (min-width: 640px) and (max-width: 960px) {
  main {
    display: flex;
  }
}

Commits

6b7c4f2 publish 0.25.11 to npm
7295c1a css: also parse media queries in @import rules
e3991dd css: some adjustments to @import parsing
8bb82ca fix #3748, fix #4293: lower css media range syntax
d8c3f87 css: parse and print media queries
6e75bc7 run make update-compat-table
8f506d5 fix #4292: support with { type: bytes }
See full diff in compare view

Updates eslint-plugin-react-refresh from 0.4.22 to 0.4.24

Release notes

Sourced from eslint-plugin-react-refresh's releases.

v0.4.24

Add "generateImageMetadata", "generateSitemaps" & "generateStaticParams" to allowExportNames in Next config

v0.4.23

Add "metadata", "generateMetadata" & "generateViewport" to allowExportNames in Next config

Changelog

Sourced from eslint-plugin-react-refresh's changelog.

0.4.24

Add "generateImageMetadata", "generateSitemaps" & "generateStaticParams" to allowExportNames in Next config

0.4.23

Add "metadata", "generateMetadata" & "generateViewport" to allowExportNames in Next config

Commits

6368815 Add generate{ImageMetadata,Sitemaps,StaticParams} to Next config [publish] (#92)
1d436ff More allowExportNames in Next config (fixes #90) [publish]
See full diff in compare view

Updates rollup from 4.52.3 to 4.52.5

Release notes

Sourced from rollup's releases.

v4.52.5

4.52.5

2025-10-18

Bug Fixes

Always produce valid UUIDs as debugIds in sourcemaps (#6144)

Pull Requests

#6135: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6140: chore(deps): update peter-evans/create-or-update-comment action to v5 (@renovate[bot])

#6141: chore(deps): update peter-evans/find-comment action to v4 (@renovate[bot])

#6142: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6143: chore: eslint enable concurrency option (@btea)

#6144: fix: generation of debugIDs with invalid length (@pablomatiasgomez, @lukastaegert)

#6146: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6147: chore(deps): update actions/setup-node action to v6 (@renovate[bot])

v4.52.4

4.52.4

2025-10-03

Bug Fixes

Fix an issue where the wrong branch of nullish coalescing was picked (#6133)

Pull Requests

#6128: Enable npm OIDC publishing (@lukastaegert)

#6133: Correct nullish coalescing branch resolution for symbol left value (@TrickyPi)

#6134: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

Changelog

Sourced from rollup's changelog.

4.52.5

2025-10-18

Bug Fixes

Always produce valid UUIDs as debugIds in sourcemaps (#6144)

Pull Requests

#6135: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6140: chore(deps): update peter-evans/create-or-update-comment action to v5 (@renovate[bot])

#6141: chore(deps): update peter-evans/find-comment action to v4 (@renovate[bot])

#6142: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6143: chore: eslint enable concurrency option (@btea)

#6144: fix: generation of debugIDs with invalid length (@pablomatiasgomez, @lukastaegert)

#6146: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

#6147: chore(deps): update actions/setup-node action to v6 (@renovate[bot])

4.52.4

2025-10-03

Bug Fixes

Fix an issue where the wrong branch of nullish coalescing was picked (#6133)

Pull Requests

#6128: Enable npm OIDC publishing (@lukastaegert)

#6133: Correct nullish coalescing branch resolution for symbol left value (@TrickyPi)

#6134: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)

Commits

55a8fd5 4.52.5
58f5a7b fix: generation of debugIDs with invalid length (#6144)
0b816b0 chore(deps): lock file maintenance minor/patch updates (#6146)
a973ed8 chore: eslint enable concurrency option (#6143)
bfa9e9f chore(deps): update actions/setup-node action to v6 (#6147)
69a9336 fix(deps): lock file maintenance minor/patch updates (#6142)
88b18b9 chore(deps): update peter-evans/create-or-update-comment action to v5 (#6140)
c9ab522 chore(deps): update peter-evans/find-comment action to v4 (#6141)
01f02bd chore(deps): lock file maintenance minor/patch updates (#6135)
cd81da7 4.52.4
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for rollup since your current version.

Updates typescript from 5.9.2 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

fixed issues query for Typescript 5.9.0 (Beta).

fixed issues query for Typescript 5.9.1 (RC).

No specific changes for TypeScript 5.9.2 (Stable)

fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

npm

Commits

c63de15 Bump version to 5.9.3 and LKG
8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
See full diff in compare view

Updates typescript-eslint from 8.45.0 to 8.46.1

Release notes

Sourced from typescript-eslint's releases.

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

ast-spec: cleanup TSLiteralType (#11624)

eslint-plugin: [prefer-optional-chain] include mixed "nullish comparison style" chains in checks (#11533)

eslint-plugin: [no-misused-promises] special-case .finally not to report when a promise returning function is provided as an argument (#11667)

❤️ Thank You

Abraham Guo

mdm317

Ronen Amiel

You can read about our versioning strategy and releases on our website.

v8.46.0

8.46.0 (2025-10-06)

🚀 Features

eslint-plugin: [no-unsafe-member-access] add allowOptionalChaining option (#11659)

eslint-plugin-internal: [no-dynamic-tests] new internal Lint rule to ban dynamic syntax in generating tests (#11323)

rule-schema-to-typescript-types: clean up and make public (#11633)

typescript-eslint: export util types (#10848, #10849)

typescript-estree: mention file specifics in project service allowDefaultProject error (#11635)

typescript-estree: private identifiers can only appear on LHS of in expressions (#9232)

🩹 Fixes

eslint-plugin: [no-floating-promises] remove excess parentheses in suggestions (#11487)

eslint-plugin: [unbound-method] improve wording around this: void and binding (#11634)

eslint-plugin: [no-deprecated] ignore deprecated export imports (#11603)

eslint-plugin: removed error type previously deprecated (#11674)

eslint-plugin: [prefer-readonly-parameter-types] ignore tagged primitives (#11660)

rule-tester: deprecate TestCaseError#type and LintMessage#nodeType (#11628)

typescript-estree: forbid abstract modifier in object methods (#11656)

typescript-estree: forbid abstract method and accessor to have implementation (#11657)

❤️ Thank You

fisker Cheung @fisker

Josh Goldberg ✨

Joshua Chen

Kirk Waiblinger @kirkwaiblinger

Mark de Dios @peanutenthusiast

Mister-Hope @Mister-Hope

Richard Torres @richardtorres314

Victor Genaev @mainframev

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.46.1 (2025-10-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.46.0 (2025-10-06)

🚀 Features

typescript-eslint: export util types (#10848, #10849)

❤️ Thank You

Mister-Hope @Mister-Hope

You can read about our versioning strategy and releases on our website.

Commits

3f5fbf6 chore(release): publish 8.46.1
aec785e chore(release): publish 8.46.0
5c1a159 feat(typescript-eslint): export util types (close #10848) (#10849)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the version-updates group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@reduxjs/toolkit](https://github.com/reduxjs/redux-toolkit) | `2.9.0` | `2.9.1` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.2.7` | `3.3.0` | | [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.8.0` | `6.9.1` | | [esbuild](https://github.com/evanw/esbuild) | `0.25.10` | `0.25.11` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.4.22` | `0.4.24` | | [rollup](https://github.com/rollup/rollup) | `4.52.3` | `4.52.5` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `5.9.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.45.0` | `8.46.1` | Updates `@reduxjs/toolkit` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/reduxjs/redux-toolkit/releases) - [Commits](reduxjs/redux-toolkit@v2.9.0...v2.9.1) Updates `dompurify` from 3.2.7 to 3.3.0 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.2.7...3.3.0) Updates `@testing-library/jest-dom` from 6.8.0 to 6.9.1 - [Release notes](https://github.com/testing-library/jest-dom/releases) - [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md) - [Commits](testing-library/jest-dom@v6.8.0...v6.9.1) Updates `esbuild` from 0.25.10 to 0.25.11 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md) - [Commits](evanw/esbuild@v0.25.10...v0.25.11) Updates `eslint-plugin-react-refresh` from 0.4.22 to 0.4.24 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](ArnaudBarre/eslint-plugin-react-refresh@v0.4.22...v0.4.24) Updates `rollup` from 4.52.3 to 4.52.5 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.52.3...v4.52.5) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.9.2...v5.9.3) Updates `typescript-eslint` from 8.45.0 to 8.46.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@reduxjs/toolkit" dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: dompurify dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: "@testing-library/jest-dom" dependency-version: 6.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: esbuild dependency-version: 0.25.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: eslint-plugin-react-refresh dependency-version: 0.4.24 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: rollup dependency-version: 4.52.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: typescript-eslint dependency-version: 8.46.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-10-27T03:32:01Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2025

dependabot bot requested a review from ash-wright123 as a code owner October 20, 2025 03:30

dependabot bot added the dependencies Pull requests that update a dependency file label Oct 20, 2025

dependabot bot requested review from Jameson13B, codingLogan and mwclemy as code owners October 20, 2025 03:30

dependabot bot added the javascript Pull requests that update javascript code label Oct 20, 2025

dependabot bot requested review from emilysallstrom and wesrisenmay-mx as code owners October 20, 2025 03:30

dependabot bot closed this Oct 27, 2025

dependabot bot deleted the dependabot/npm_and_yarn/version-updates-1866f8bf16 branch October 27, 2025 03:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: bump the version-updates group across 1 directory with 8 updates #238

fix: bump the version-updates group across 1 directory with 8 updates #238

Uh oh!

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

fix: bump the version-updates group across 1 directory with 8 updates #238

fix: bump the version-updates group across 1 directory with 8 updates #238

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.9.1

What's Changed

DOMPurify 3.3.0

v6.9.1

6.9.1 (2025-10-01)

Bug Fixes

v6.9.0

6.9.0 (2025-09-30)

Features

v0.25.11

0.25.11

v0.4.24

v0.4.23

0.4.24

0.4.23

v4.52.5

4.52.5

Bug Fixes

Pull Requests

v4.52.4

4.52.4

Bug Fixes

Pull Requests

4.52.5

Bug Fixes

Pull Requests

4.52.4

Bug Fixes

Pull Requests

TypeScript 5.9.3

v8.46.1

8.46.1 (2025-10-13)

🩹 Fixes

❤️ Thank You

v8.46.0

8.46.0 (2025-10-06)

🚀 Features

🩹 Fixes

❤️ Thank You

8.46.1 (2025-10-13)

8.46.0 (2025-10-06)

🚀 Features

❤️ Thank You

Uh oh!

dependabot bot commented on behalf of github Oct 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Oct 20, 2025 •

edited

Loading